Credit Fraud Alert: Definition, Duration, and How It Works

What a Credit Fraud Alert Is

A credit fraud alert is a notice that a consumer can ask a nationwide credit reporting company to add to a credit file. The notice tells lenders who review that file that the consumer may have been, or may be about to become, a victim of identity theft, and that the lender is expected to take extra steps to confirm identity before extending credit.

The mechanism comes from Section 605A of the Fair Credit Reporting Act, which sets out the categories of alerts, who may request them, and how long each remains in place. An alert is a flag attached to a file rather than a statement about creditworthiness, and it does not alter the underlying credit history.

Three categories exist under the statute. The initial fraud alert lasts one year. The extended fraud alert lasts seven years and requires an identity theft report. The active duty alert is available to service members and lasts one year.

What Happens After an Alert Is Placed

When a lender requests a credit report that carries a fraud alert, it receives a message directing it to take reasonable steps to verify the applicant's identity. In practice, lenders commonly call the consumer at a telephone number already on file, request additional identifying documents, or use other verification methods before proceeding.

The alert does not stop a lender from approving an application. It changes the process rather than the outcome, and a lender that completes verification may still extend credit.

A fraud alert also affects prescreened offers of credit and insurance. Under the Fair Credit Reporting Act, consumers who place an alert may be excluded from prescreened solicitation lists, which reduces the volume of firm offers of credit that arrive by mail.

How a Credit Fraud Alert Is Requested

A request goes to any one of the three nationwide credit reporting companies: Equifax, Experian, and TransUnion. Each maintains a separate file, but the law requires the company that receives a valid alert request to notify the other two, so a single request reaches all three files.

The request must be accompanied by appropriate proof of identity. That typically means a government-issued identification, a utility bill or bank statement showing a current address, and a Social Security number. Requests can be made online, by telephone, or by mail.

Placing, renewing, and removing a fraud alert is free. Consumers can confirm that the alert appears on all three files by requesting copies through AnnualCreditReport.com, the site the nationwide credit reporting companies operate jointly under federal law.

Extended Fraud Alerts After Identity Theft

An extended fraud alert lasts seven years and is available to consumers who have filed an identity theft report. That report is generally filed with a law enforcement agency, and IdentityTheft.gov, operated by the Federal Trade Commission, produces a report and a recovery plan that can serve as supporting documentation.

The extended alert requires appropriate proof of identity, and the credit reporting company must also exclude the consumer from prescreened credit and insurance lists for five years.

An extended alert can be removed before it expires if the consumer asks the credit reporting company to do so in writing and provides proof of identity.

Active Duty Alerts for Service Members

The active duty alert is designed for service members who are deployed or who are in the process of moving. It lasts one year and can be renewed to cover the length of a deployment.

The request must include a copy of official orders or other appropriate proof of active duty status. As with other alert types, a single request made to one nationwide credit reporting company is forwarded to the other two.

Fraud Alert, Credit Freeze, and Credit Lock

A security freeze blocks most lenders and other users from accessing a credit file at all, which means a new account generally cannot be opened in the consumer's name using that file. A fraud alert does not block access; it attaches a warning and a verification instruction to a file that remains available to lenders.

A freeze must be placed separately at each of the three nationwide credit reporting companies. Placing and lifting a freeze is free under federal law, and the freeze stays in place until the consumer removes it.

A credit lock is a commercial product offered by a credit reporting company rather than a statutory protection. Its terms are set by the company's own agreement with the consumer, not by the Fair Credit Reporting Act.

What a Credit Fraud Alert Does Not Do

A fraud alert does not remove inaccurate or fraudulent information from a credit file. Disputing that information is a separate process under the Fair Credit Reporting Act, handled between the consumer, the credit reporting company, and the company that furnished the data.

It also does not close existing accounts or prevent a thief from using accounts that are already open. An alert applies to new applications for credit, while existing accounts remain under the lender's control.

Alerts expire, and an expired alert no longer produces the verification prompt. Consumers who want an ongoing restriction on file access generally use a security freeze rather than a series of renewals.